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KTll-B 


PAGING OPTION. 


INTRODUCTION 


1.1 General Description 

The KTll-B Paging Option, designed and manufactured by Digital, provides 
on a PDP-11, address mapping from a program's virtual address space to 
the physical bus address space by substitution and extension of the most 
significant bits of the virtual address as specified by entries in a "page m; 
This mapping permits user and monitor programs to be segmented and these 
segments to be allocated to available core on a space-available basis in 
a manner completely transparent to the user. The address mapping, along 
with the inherent memory and system protection features of the KTll-B, 
provide a multiuser, machine-language timesharing environment, in which 
the monitor and other users are protected from erroneous or malicious 
action by any user. The KTll-B facilitates the writing of reentrant cod 
shared by many users, thereby optimising use of core and auxiliary store 

The KTll-B is an interface between the processor and the Unibus, as shew 
in figure 1-1 below. In unpaged mode, bus operations are performed as i 
a normal PDP-11 system. With the KTll-B enabled, certain bus signals ar 
modified to provide protection and relocation. 
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FIGURE 1-1 



Figure 1-2 illustrates a user virtual program and a typical relocation 
to physical core. Note that the physical core available may be four 
times the size (262 K bytes) of the maximum size user program (64 K 
bytes) . 
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1.2 


Specif i cations 


a. 

Mechanical : 



No. of Logic Panels 

Two 


Type of Logic Panels 

H911 


Dimensions 

19 in. w, 20 in. d, 10-3/8 

b. 

Electrical: 



Input Power 

120/240 VAC - 10%, 47-63 Hz 


Power Supply 

One H72.0 


Module Type 

M- Series 


Logic Levels 

1 ~ +3V, 0 - 0V (TTL) 

c. 

Operational : 



Modes 

.Unpaged, Monitor paged. Use 
Paged 


Virtual Program Size 

2-16 bytes (max. ) 


Max. Physical Core 

238 K bytes 


Page Size 

512 bytes 


1.3 Avail ab i 1 i by 

The KTll-B is a Computer Special Systems product and is available from 
Digital Equipment Corporation, 146 Main Street, Maynard, Massachusetts' 
01754 as a component in new installations. 


SECTION 2 
INSTALLATION 


2.1 SITE CONSIDERATIONS 

The KTll-B is built on two H911 logic panels. This assembly should be 
mounted in an H96j2f cabinet or equivalent, preferrably as close to the 
PDP-11 as possible. On the back door of this same cabinet should be 
mounted the H72D power supply; this power supply occupies an 11-% *• 
high mounting space. The cabinet is not supplied as part of the KTll— B 

Due to the action of the KTll-3, peripherals which are normally mounted 
with the processor (Teletype, reader, and punch controls and KV711-L real- 
time clock) must be mounted in a separate DDll system unit (not sunn lied 
with the KTll-B) . The KWll-L may also be mounted in slot BD9 of the 
KTll-B. 

2 . 2 CABLES 

2.2.1 Power Cables 


Line power is brought to the II720 pov/er supply vi 
3-prong plug. This Plug should be inserted into 
the PDP-11 console power switch, so that power is 
when the processor is turned on. 


a a cable with a 15 amp 
an outlet controlled by 
£>upplj. cci to one Li'il**B 


Logic power , including the ACLO and DCLO signals, is supplied via a cable 
assembly connected to a power end panel on one of the II911 panels. 

2.2.2 Unibus Cables 


The I<Tll-B must be immediately adjacent to the processor on the Unibus, 
as shown in Figure 1—1. BCll-A cable assemblies are used for all Unibus 
connections. The Unibus comes directly from processor slots a 14 and B14 
and enters the KTll-B in slots ADI and BD1. The Unibus leaves the KTll-B 
from slots AD 3 and BD3. 

2.2.3 Control Cable 

A Flexprint cable runs from slot BD9 in the processor to slot D12 in the 
KTll-B. This cable carries non-Unibus signals necessary for the operation 
of Kiii-o. 
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2.3 INITIAL OPERATION 

2.3.1 Checkout 

The K'i'll-B is checked out and demonstrated to be in working order by- 
performing the following steps: 

1) Turn on all devices and power in the system; no special 
test configuration is necessary for the system. 

2) Verify that the examine and deposit console functions 
work and also that the MAINDEC processor and memory 
diagnostics run. (See Appendix A.) 

3) Run the KTll-B diagnostic programs KTl , KT2, KT3, and 
KT6, allowing each to make at least twenty passes (the 
teleprinter boll v/ill ring at the end of each pass). 

4) Run the MAINDEC processor diagnostics in user mode using 
the KTU program. 

5) Run the KTES system exerciser program in both exec and 
user modes with all available devices implemented in 

the program (DECtape, RPll disc, KV711-I, clock, high-speed 
reader and punch, and Teletype reader and printer). 

2.3.2 Acceptance 

The KTll-B is accepted in-house prior to shipment and is considered 
to be meeting its specifications by performing the steps described in 
2.3.1 above. In addition, the system should be exercised with the 
KTES program for at least eight hours running all available devices 
except the Teletype and high-speed reader and punch (these are omitted 
since they may be subject to excessive wear if operated continually 
over long periods of time) . 


SECTION 3 


OPERATION AND PROGRAMMING 


3.1 CONTROLS AND INDICATORS 

There are no operator controls or indicators on the KTll-3. The KTll-B 
registers may be examined manually by using the processor console func- 
tions . 


3.2 DIAGNOSTIC SOFTWARE 

Appendix A contains the descriptions of the diagnostic and exercise 
programs for the KTll-B. Note that certain MAIN DEC standard diagnostic 
programs are modified to run with the KTll-B. 


3.3 INPUT/OUTPUT CODING 


3.3.1 General 


The KT 1 1 - B may be considered as an extension of the central processor 
It's pux'pose is to provide system protection and program relocation l 
that many users may use the system on a timesharoa basis. The indivi 
users (the programmers writing programs to be run in user mode) need 


no 


al 


be concerned about the KTll-B; in fact, each user writes programs as if 
ho had the entire PDP-11 and 32K words of core memory to himself. Certar 
restrictions to users are imposed by the KTll-B, but otherwise, it is 
entirely transparent. It is the systems programmer, the person who writ:- 
the monitor/ who needs to be concerned about the KTll-B. Therefore, tna 
systems programmer should be intimately familiar v/ith the operation of th: 
KTll-B before attempting to write a timesharing monitor making use of the 
KTll-B. To this end. Section 4 of this Option Description, describing th* 
principles of operation of the KTll-B, should be thoroughly understood 
before continuing reading in this section. 


3.3.2 KTll-B Registers 

iEleven_Jius__addressesj are assigned to the operation registers of the KTl 1- ’ 
There are 8 addJ^tional^.addresses which reference the words of the scratcn- 
pad holding the 8 most recently "accessed Page Map Entries. 


3.3.2.X Page Status Control Register (KTCS - 777576) 
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FCN 


1 0 


* = READ ONLY 

0 = Cleared to 0 by the Unibus INIT signal 

FCN -Determines KTll-B operating mode 

0 -Unpaged operation - the bus signal INIT clears PC': . 

1 -Destination only paging - paging only operational 

while processor is in "DESTINATION" or "EXECUTE" 
state. This is intended as a maintenance mode only. 
Note that traps do bus operations in the "SERVICE" 
state of the processor, and therefore, will be 
unpaged. 

2 -Normal paging - this is the standard operating mod.:. 

3 “Start user - this mode is entered by the Exec in 

order to start or restart a User. The next bus 
operation made by the processor while in any state 
except "FETCH" that is the next processor bus 
operation not a fetch causes the KTll-B to load 
the D-lines of the bus with the contents of the 
KTPC (the paging program counter) - the address 
and control (A and C) lines on the bus are ignored. 
The following bus operations cause the KTll-B to 
load the D-lines with the contents of KTPS (the 
paging processor status). User paging is then 
invoked and the bit 0 of XTCS is cleared (normal 
paging is resumed) . Note that if the instruction 
executed immediately after setting the FCN bits 
to 3 is an RTI , the processor program counter and 
status register will be loaded from KTPC and KTPS 
respectively. 

SS “SOURCE STATE - This bit is affected only if all th • 
"ERROR" flags, bits 15 through 11 of KTCS are clc-ar. 
Under this condition, it is set whenever the procosr- 
does : 


“ 7 - 


DS 


UM 


1. Any bus operation while in the "SOURCE" state 
during normal paging. 

2. A DATO operation while executing a TRAP or JSR 
during normal paging. 

3. A DATO while executing a JSR during destination 
only paging. 

4. Any bus operation while executing a RTS or RTI 
and paging during normal or destination - only 
paging . 

It is cleared whenever the processor does any bus 
operation while in the "FETCH" state during normal 
paging if all the error flags are clear. 

-DESTINATION STATE - Bit is affected only if all the 
error flags are clear. Under this condition, it is 
set whenever the processor does: 

1. Any bus operation while in the "DESTINATION" state 
during normal or destination - only paging. 

2. The second DATO operation v/hile execrating a TRAP 
during normal paging. 

3. The second bus operation while not in the fetch 
state and executing an RTI during normal or 
destination only paging. 

It is cleared whenever the source state bit is cleared. 

-USER MODE - This bit governs whether USER (set) or 
EXEC (cleared) paging is used to generate physical 
address. It also governs use of privileged instruc- 
tions, the ability to modify processor priority, and 
system reaction to interrupts and traps. This bit 
is set as the final act of the START USER SEQUENCE. 

It is cleared by interrupts, paging violations (any- 
thing that sets an ERROR flag) and EXEC traps, as 
well as the bus signal INIT. 

-INTERRUPTED USER - This bit is loaded from the USER 
MODE bit whenever an INTR signal is received on the 
bus or a paging violation occurs. It is cleared any 
time a DATO is made to KTCS or an INIT occurs. 
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IV -INSTRUCTION VIOLATION - This bit is set whenever a 

USER attempts to execute one of the privileged 
instructions (HALT, WAIT, or RESET) or when an 
attempt is made to transfer program execution from 
a public to a private page at any other place but 
at an entry point instruction, " BR .+2." The 
instruction is not executed and a trap is made to 
the exec (see 4.2.3). This bit is cleared by INIT 
or a DATO to KTCS . 

AV -ADDRESS VIOLATION - This bit is set whenever an odd 

address error (attempt by the processor to do a word 
bus operation to an odd address) occurs. It is 
cleared by INIT or a DATO to KTCS. 

VJV -WRITE VI ORATION - This bit is set whenever an at temp 

is made by the processor to do a DATIP, DATO, or EAT 
to a page for which the protection key is not "WRITE 
ENABLED" . It is cleared by INIT or a DATO to KTCS. 

PV -PRIVACY VIOLATION - This bit is set whenever the 

processor attempts a bus operation to a page which 
is not keyed "PUBLIC" when the operation does not 
occur during the "FETCH" state ar.d the last instruc- 
tion fetched during normal paging which wa s not from 
the scratchpad and did net of itself constitute an 
instruction violation from a page keyed as PUBLIC. 
This bit is cleared by INIT or a DATA to RICS. 


RV -RESIDENCY VIOLATION - This bit is set whenever the 

processor attempts to reference a page which is not 
keyed as "RESIDENT". It is cleared by INIT or a 
DATO to KTCS . 


3. 3.2.2 USER and EXEC Map Control Registers (KTUM - 777614 and 
KTEM - 777616) 

THESE REGISTERS SPECIFY THE LOCATION 7HTD CHARACTER OF THE USER 
AND EXEC PAGE MAP PAGES (see 4.2.2). 

Both registers are 16 bits wide: 


SHARED PAGES 

PHYSICAL PAGE ! 

BOUNDARY 

AD MS . j 


15 9 8 0 
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The boundary between simple user paging map entries and shared 
page map entries is determined by the high order 7 bits of the 
User Map Control Register. If these bits equal N, the first N 
entries in the page map are simple entries (if these 7 bits are 
all clear, then 2 ^ , or all of the entries in the page map are 
simple entries) . 

The high order 9 bits of the physical address of the User Page 
Map Page are in the low order 9 bits of the User Map Control 
Register. 

The extent of simple exec paging is determined by the high order 
7 bits of the Exec Map Control Register (KTEM) . If these bits 
equal N, there are N page map entries in the Exec Page Map Page. 
(If these 7 bits are all clear, then 2', 128 entries, are in the 
page map page.) The remaining entries (128 - N) are in the User 
Page Map as “Exec-per-process" entries (see 4. 2. 2. 2). 

Loading (DATO or DAT OB ) either of these registers causes the 
associative memory to be cleared (see 4.1.2) and the replacement 
register to be set to 10^. 


3. 3. 2. 3 PAGE INSTRUCTION COUNTER 

This register is loaded with 
Lines on the Unibus whenever 
; error flags are set, and the 
in the "FETCH" state. 


(OTIC - 777 60P ) 

the low order 16 bits of the Address 
normal paging is operational, no 
processor docs a bus operation while 


3. 3. 2.4 PAGE STACK POINTER (KTSP - 777602), PAGE PROGRAM COUNTER 
(KTPC - 777604), AND PAGE PROGRAM STATUS (KTPS - 777606) 


These registers are loaded during the "MODIFIED SEQUENCE" 
discussed in 4.2.3. The first DATO of such a sequence has the 
processor status Register on the D-lines of the bus. This 
is loaded into KTPS. The second DATO of the sequence holds the 
processor stack pointer on the A-lines and the Processor Program 
Counter on the D-lines. These are loaded respectively into KTSP 
and KTPC. Note that the modified sequence may be entered due to 
a paging violation in Exec Mode. If recovery is to be possible 
after such an event, KTSP, KTPC, and KTPS must be saved after 
User program interruption and restored when that User is to be 
restarted. 
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3. 3. 2.5 PAGE DATA REGISTER (ICTDT - 777612) and PAGE ADDRESS 
REGISTER (KTAD - 777610) 

These registers are loaded from the D and A lines respectively 
whenever any of the error flags become set or a time-out occurs. 


3. 3.2. 6 PAGE MAI NT EN AN C S REGISTER (KTMR - 777575) 

This register holds the replacement counter and 5 other flags 
which have meaning only when observed with an oscilloscope 
during certain KTll-B internal operations. The Replacement 
Register is incremented through the range 1 0 Q to 57 Q v;henever 
a look up sequence occurs. It is set to 1 P 8 whenever KTUK or 
KTEM are loaded. 
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3. 3.2. 7 PAGE W1NDOV7 (KTWN - 777572) 

Bus operations to this address (after paging) are done to the 
USER virtual address specified by the contents of J7TAD. Page 
violations can occur both at the paging to KTWN and from the 
contents of KTAD. This permits the Exec to reference User 
paged addresses conveniently. 

WINDOW on a Window causes a time-put trap. 


r* 


SECTION 4 

PRINCIPLES OF OPERATION 


4.1 OVERALL DESCRIPTION 


The ierl 1 -B provides address mapping from the program's virtual address 
space to the physical bus address space by substitution and extension 
of the most significant bits of the virtual address as speeme by 
entries in a "page map". This mapping permits access lO the entire 
physical bus address space which is 4 times larger than any program s 

virtual address space. 


The operating system in a multiuser (machine 
environment is protected against the useis. 


language timesharing) 


4.1.1 Goals 

The KTll-B accomplishes mapping and system protection with minimum 
interaction with the processor outside the UKIBUS. System projection 

is achieved by: 


1 . 


Keying pages as “public" or "privace 
protected” . 


and "writeable" or "write 


2 . 


Providing an entry point instruction which must mark 
from public to private code execution to permit use 

code. 


an 

of 


entry 

private 


3. Disallowing execution of privileged instructions in user mode 
(e.g. Halt , Reset). 

4. Disabling modifications to processor priority while m user 
mode. 

5. Processing odd address violations and disabling processor 
handling of such violations while in user mode. 

6. Breaking up "trap loops" (TRAP service routines calling traps 
without an intervening instruction) while in user mode. 


7. Entering exec mode to service interrupts and exec traps with 
push operations of the hardware interrupt service sequence 
directed to special registers. 


8. Trapping to exec mode when power fail occurs. 

9. Disabling processor handling of stack overflow violations 
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It is possible to implement a “demand paging" scheme for user 
program memory allocation since: 

1. ; Pages may be keyed as “resident" or “non-resident • 

2. Record is kept of the first location of each instruction 
executed. 

! 

3. - Record is kept of the progress of each instruction through 

processor states. 

Provision is made for user-exec communication through exec traps 
in user mode and user paged read— writes in exec irocig (the page 

window" ) . 

The KTll-B is power cleared to a non-paging node in which KAll 
operation is identical to that of a KAll without the KTll-B except 
for some time penalties on bus operations, and loss of stack over- 
flow trapping. 


4.1.2 Major Functional Components 

Refer to the KTll-B drawing set for the logic diagrams. 

4. 1.2.1 Associative memory - 

An 8 x 8 associative memory permits simultaneous comparison of the 
8 O-bit words it contains against the seek data. The word that 
matches the seek data shows a hi match output while the match outputs 
for all other words are low. (Optionally, a 24-word associative 
memory is , available , allowing fewer core look ups.) 

Each word of the associative memory, contains the page number (7 bits) 
and User tag (1 bit) the protection key and relocation information 
held in the corresponding word of the Scratchpad. The User tag is 1 
if the information is for a page of a program running in User mode 
and 0 for a page of a program running in Exec mode. 

4. 1.2.2 Scratchpad - 

8 words of 16 x 16 IC memory contain the Page Map Entries (protection- 
keys and relocations) for the 8 pages identified by the associative 
memory as just described. The remaining 8 words contain some Ox uae 
KTll operational registers. 

One 16 bit word at any time may be made available at the output of 
the scratchpad or written from the scratchpad input. (With a 24-v/ord 
associative memory, 16 more words of scratchpad are added.) 
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4. 1.2. 3 Replacement Counter - 

When a page is referenced whose page number has no match in the associa 
tive iaemorv , the user’s or exec's core page map is accessed for the 
appropriate Page Map Entry. The page number and the current state of 
the User Mode bit are then loaded into the associative memory and the 
pace map entry found in the core page map is loaded into the corre 
sponding word of the scratchpad. The address in the associative 
memory and in the scratchpad which is to be so loaded is specified by 
the replacement counter. The replacement counter is then incremented 
to point to the next associative memory address. This sequence of 
operations is referred to as a “Lookup Sequence". 


4. 1.2.4 Unibus Receivers and Drivers - 

Unibus signals from the processor may not in some cases be passed on 
to URIBUS devices (including memory) until the relocation specified 
for the referenced page has been performed ar.d the projection *coy 
checked against the requested bus operation. If a Page Map Entry 
must be fetched from core, the bus signals D 15:®- from the proceseo. 
must be blocked so that the lookup operation may be made on the bus. 


4.2 GENERAL SPEC! FI CAT JOES 
4.2.1 Exec and User Programs 

A distinction is made in this specification between programs wmch 
have privileged access to system resources and those v/hich do not. 

If a program is given such privileges, the KTll-B cannot protect the 
system against abuse and failure caused by that program. Such, a 
program (the "Exec") is generally responsible for resource allocation 
among unprivileged programs ("User" Programs). These resources mcln 

1. ’ CPU Time. 

2. Process Priority. 

3. Core Storage. 

4. Sharable Code. 

5. Sharable Devices (Disks, Drums, etc.). 

6. Non-sharable devices (DECtapes, Paper tape, etc.). 

The Exec ie responsible for efficient management of these resources 
and thus assumes control whenever a user attempts to. 

1. Halt the processor. 

2. Execute a trap loop. . 

3. Access core or sharable code in a manner not permitted him. 

4. Use a part of his address space for v/hich no physical core is 

then allocated. 
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Processor priority cannot be changed by a User. The user may request 
system resources through Exec traps (instructions which cause traps 
to the Exec). The Exec receives all interrupt requests as well as 
maintains processor priority and system activity to satisfy user 
resource requests in the most effective manner. The Exec is also 
responsible for orderly system shut down and restart on power trans- 
ients, and therefore, receives power fail and recovery traps as well. 

The system starts in Exec mode without paging. The Exec establishes 
paging parameters and enters paged operation in its start sequence. 


4.2.2 Page Maps and Keying 

Two of the parameters of the inaging operation are the address of the 
User and Exec Page Maps in core. When the processor is executing a 
User mode program, references to pages whose page number and mode do 
not appear in the associative memory cause fetches ("page map entry 
lookups") to be made in memory to a table of User Page Map Entries, 
the User Page Map. Such references when referring to User page 0 
cause a fetch to be made of the zeroth sequential entry in the User 
Page Map. Referrals to User Page 1 (if the entry for User Pago 1 
does not appear in the associative memory) cause a fetch to be r.'.adc- 
from the first sequential entry in the User Page Map, and so on. 

Each entry consists of one J.6 bit word and contains the protection 
key and relocation for the corresponding p rgi- 

Registers in the Kl’ll-B (the User and Exec Map Control registers) 
specify the phvsical core addresses for the User and Exec Page Maps, 
paging may be switched for various users by modifying the User Map 
Control register to point to different page maps. 

Keying for a page indicates to the KTll-B whether or not that page is 
'•resident", "public", and "write-enabled”. Three bits of each Pago 
Map Entry word hold the protection key for the page each controls. 

The (virtual) address space for any program in a PDP-11 is^2 16 bytes 
(2 i5 words). If each pageis made to contain 2 bytes (256 words), 
then each User will have virtual pages. Since each page map entry 
requires' 1 word, this implies that each User will require a page map 
consisting of 128 words (half a page). System information for that 
User could occupy the remainder of that page. Choice Oj- a pa- a 
of 2 1 0 bytes implies a 64 word page map (one eighth of a 5x2 word psg 
which represents unacceptable core inefficiency for the Exec - 320 
words lost per core - resident User. (User management is greatly 
if all the information pertaining to a user and no^ information nor. 
pertaining to that User is contained in one page which tne Exec can 
allocate and may be swapped in and out of core with that User.) 


» 
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There are bytes in a physical addxa§^sgace - _£?f.J;ho_UnibiiS. If 

each page is 2 9 bytes, there are 2 physical pages. The physical 
page address is thus specified by 9 bits selecting bytes within a 
page and 9 bits specifying the page address within the physical 
address space. The 9 bits specifying the byte address within a 
page are taken from the 9 low order bits of the address lines of the 
processor bus (see 0.2.4)-A . The 9 bits specifying the page 

address are taken from the 9 relocation bits of the appropriate page 
map entry word. Each page map entry word contains 3 bits for the 
protection key, 9 bits for the relocation, and 4 bits unused. 

pa y U. h'+ y‘ j 


/ 15 1 14 j 1 3 1X3 

RESIDENT | WRITE 

PUBLIC 


i_8 


T 1 £1 
_J3 J 


ENABLE 


RELOCATION 


.■ /- 1 


4.2.2. 1 The Exec Page Map Page (EPKP) 

The Exec Page Map Page is considered to be in page zero of the Exec’s 
virtual address space. For reasons discussed in 4.2.6, exec page zeiv- 
is not paged through the associative memory. Instead it is considered 
to be the page specified by the low order 9 bits of the Exec K~P 
Control Register* The PDP-11 Interrupt and trap vectors are in 
addresses 0 - 377 of this p?ige. The Exec Page Map Entries are in 
addresses 400 and up. (Note that Execs running in separate processors 
sharing some common core and peripherals but governing privare busses 
with private peripherals as well, can maintain distinct interrupt 
vectors) . 

There is for the Exec, a set of parameters including Dectnpe Director?. 
User I/O buffers. User Page Maps, User Context etc. that is unique to 
each User. This set can be accessed by dedicating some Exec address 
space to each core-resident user. Tables are then required to couple 
each User with the appropriate space. Considerable use of indexing io 
required in this scheme. 

In order to ease the pressure on exec address space, reduce the in^tre 
tion time when referring to these “per-process" variables, and to 
decrease monitor complexity, “exec-per-process" paging is provided, 
pages containing such variables are associated with Excc-Per-Pro-*.- 
Entries" in the lo address half of the User Page Map Page. Reference.., 
to these r*f the Exec are thus paged according to the currently 

active user (whose Page Map Page is referenced by the User Map Control 
Register) . 

The boundary'- between Exec simple space and Exec-per-proccss space is 
determined by the high order 7 bits of the Exec Map Control Register. 
The Exec Map Control Register and Page Map Page are thus configured 


as : 
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LNE 


V 

LENGTH OF EXEC- SIMPLE 
(7 bits) 


EPM 


'l' 

EXEC PAGE MAP ADDRESS 
(9 bits) 


PHYS ADRS EXEC ADRS EXEC PAGE MAP PAGE 

1000 8 *EPM 0 



INTERRUPT Sc 
EXEC TRAP 
VECTORS 

+400 : 

EXEC TRAP 


MAP 

+400 

ENTRIES 

+2 (LNE+1) 

EXEC 


CODE 


Exec address 0 through IpNOg* LNE •'•777 
have page map entries in exec addresses 
Exec addresses above 10.0£fg * LNE + 777 
and have page map entries in addresses 
the User Page Map Page. 


arc in Exec simple lv*>_. ... a and 
400 through 400 + 2* LNE. 
arc in Exec-per-process space 
2*x (LNE + 1) through 376 of 


4. 2. 2. 2 The User Page Map Page (UPMP) 

The UPMP holds the USER PAGE MAP ENTRIES and the Exec-per-Process 
Entries. It has an address in ExeC-Per-Process space but (generally) 
not in the user space. We will establish the convention that the 
UPMP appears in the first page of exec-per-process space - namely 
1000 8 * (LNE + 1). The physical address of this page is determined 
by the low order 9 bits of the User Map Control Register. (By our 
convention, the low order 9 bits of address 2* (LNE + 1) of the 
user page map page are equal to the low order 9 bits of tne User 
Map Control Register.) 

To provide for shared paging in which several users share use of code, 
movable in core, the User address space is broken into two parts: 
simple user space and shared user space. The high order 7 bits os tr.c 
User Map' Control Register determine the boundary between simple and 
shared user space. The User Page Map Page does not hold the page map 


► 
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entries for shared, pages but holds "shared entry pointers" instead. 
The low order 9 bits of the Shared Entry pointer contain the physic 
page and the high order 7 bits contain the entry number in which th 
Shared Page Map Entry is to be found. (Shared Page Map Entries may 
be in addresses 400-771 only of any page. ) 

A User Page Map Page and the User Map Control Register are arranged 
as follows: 


LNU 


UPM 


15 


9 8 


£ 


LENGTH OF USER USER PAGE MAP 

SIMPLE (7 bits) ADDRESS (9 bits) 


PHYS ADUS EXEC ADRS 

UPM 10P0 Q * (LNE + 1) 

+2*(LNE+1) 

+4 00 Q 

+400 8 +2* (LNU tl) 

+777 s 

(Some other Page Map may have shared entry pointers which point 
to entries 0 through LNU of this Page Map.) 


USER CONTEXT 


Ea.Ei_ a 

ENTRT 73 S 


USER PAGE MAP 
& SHARED PAGE MAP 
ENTRIES 


SHARED ENTRY POINTERS 


4.2.3 Exec Trap and Interrupts 

A variety of conditions will cause an operating user program to be 
stopped and control transferred to the Exec. In each case, this is 
done via a slight modification of the standard trap interrupt 
sequence: the DATO's of the modified sequence cause no modi fi cut:'- 

of core and are directed instead, to special registers (the Page 
Program Status Register and the Page Program Counter) within the 
KTll-B Control. The address to which the Process Program Countcr 
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was directed is also saved. In this modified sequence a flag bit, 
PGIU, the "interrupted user", bit is set or cleared to distinguish 
between termination of User and Exec Programs. 

Exec Trap 4 - This vector handles Exec Bus Errors {odd address errors 
and time outs) and Exec or User Illegal Instructions, and Paging 
Violations. All EXEC traps except time out and paging errors will 
run through the standard sequence. The Stack Overflow trap is 
disabled to protect the Exec from stack pointers set by the User 
below the stack boundary: interrupts even through the modified 
sequence would cause the stack overflow flag to be sot if the stack 
is below the stack boundary. Exec Bus Errors and Exec or User Paging 
Violations proceed according to the modified sequence. As a conse- 
quence, if Exec Paging Violations and Bus Errors occur (time-out, etc) 
status will be lost. It will be impossible to restart that User. If 
the memory bank in which the vector is located is dead, the processor 
will halt with address 4 in the address indicators. If the memorv 
bank in which the trap service routine is located is dead, the 
processor will repeatedly execute the trap vector - only the address 
4 will be seen in the address indicators but the processor will run 
until stopped from the console. The assumption will be made in the 
description to follow that the first few instructions of the Exec 4 
service routine will be successfully executed. These instructions 
save the special registers, setup the stack pointer, and clear the 
PGIU and other error indication bits in the Page Control Register. 

Exec Bus Errors, Exec and User Paging Violations, and User Instruction 
Violations are processed by the modified sequence. Exec Instruction 
Violations are processed by the standard sequence. Thus the first 
action of the Exec 4 trap service routine should be to test the Page 
Control Register. Bits will be set indicating whether a Bus Error, a 
Page Violation, or a User Instruction Violation has occurred and in 
which mode. If any bits are set, the special registers should be 
saved, the stack pointer adjusted, software flags set, and all error 
bits in the Page Control Register cleared - an uninterruptable sequenc 
of perhaps 30 microseconds. If no, bits are set, an Exec Illegal 
Instruction caused the trap. 

Exec Trap 1 0 - Reserved instructions from both User and Exec routines 
come through this trap. This can be used to cause emulation of unim- 
plemented instructions. If the reserved instruction came from a User, 
the PGIU bit is set. Otherwise , it is unaffected. Reserved instruc- 
tions cause operation of the "modified sequence" and transfer to Exec 
mode if executed in User Mode. If in Exec Mode, the standard sequence 
is exercised. The PGIU bit should be cleared early in the service 
routine for this trap (and before interrupts are enabled) . 
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Exec Trap 14 - This trap is taken for execution of op code 000003 or 
operation of the trace flag in either User or Exec Mode through the 
standard sequence if from the Exec Mode or through the modified 
sequence (with a set of PGIU) , if from User Mode. Through use of 
this trap users can share DDT without reserving any address space 
for its use. The Exec can also use DDT as part of its address space. 

Exec Trap 20 - IOT instructions cause execution of this trap (as in 
Exec 10 and Exec 14) . 

Exec Trap 24 - Power fail and restart from both User and Exec Modes 
come through this trap (standard sequence from Exec, modified sequence 
from User) . The PGIU bit can be tested to determine v.’hether this is 
from the Exec or User. This bit should be cleared within 2 milli- 
seconds of the trap to provide for another power fail. VThen power is 
coming up, all devices on the UNIBUS are initialized. This puts the 
KTll-B in unpaged operation in which physical (rather than Exec 
Virtual) address 24 is used. 

Exec Trap 3 0 - EMT instructions (as in Exec 10 and 20 ) . 

Exec T r ap 34 - Trap instructions in the KAll receive higher priority 
than bus requests. The potential exists for a user program to post- 
pone interrupt servicing indefinitely by successive trap instructions. 
The KTll-B detects attempts to execute two successive TRAP instruction 
in User mode and directs the second to the Exec through the Modified 
Sequence. This vector is also used for execution of the TkkP instruc- 
tion in Exec Mode. 

Interrupts in User Mod e 

The Exec needs to service interrupt requests since Users are not 
generally empowered to run at any other priority level than level 0 ; 
Users are generally not given access to I/O registers; and the Exec 
needs system activity information in order to manage system resources. 
If an interrupt occurs while a user is running, it is necessary to 
save the user program counter and status register and transfer control 
to the Exec at the location and status specified by the interrupt 
vector for the interrupting device. No reliance may be made on the 
contents of the User stack pointer. The "modified sequence" is there- 
fore, put in operation if a User program has been interrupted. The 
interrupt vector is taken from Exec paged core. The PGIU bit is set 
in the page control register. This bit is cleared when an interrupt 
is serviced while an Exec program is running. 



4.2.4 Paging Violations 

Residency Violations - As system requirements for core grow, the Exec 
may” begin to swo'^ers in and out of core from a swapping store To 
cut down on the swapping overhead, the Exec may choose to swap out 
only the portions of user programs not currently or about to the 
needed. Thus users may continue to run with only portions or program 
••Resident" in core. Those pages of running user's programs \.hich the 
exec swaps out it marks as "Non-Resident" in their page maps. (The 
residency key of the appropriate page map entry is made clear.) VIhcn 
thfe user tries to reference such a page, a "Residency Violation" cccu: 
and a Page Violation Trap occurs. The Exec can then bring in the 
required page, set the residency key bit in the page map entry, and 

restart the user. 


There are difficulties, however, in restarting the user 

1 . 


The program counter is advanced some undetermined number 
of addresses as the execution proceeds through multiple 
word instructions. 


2. Registers used in auto decrement and auto increment 
addressing are modified by the operation of the 
instruction. Unless the point to which the instruction 
proceeded before causing the residency violation is 

bn own, the modifications made to the registers cannot 

be determined. 

3. Implicit stack operations occur in some instructions 
(JSR, RTS, RTI, and TRAP). VJhich modifications to 
the processor stack pointer were made before the 
instruction was stopped must be known. 

Therefore, while in user mode, the address from which the instruction 
currently being executed was fetched, and the processor states that 
were entered during its execution are saved in KTll B registers. 

privacy Violations - To provide for controlled use of leased programs 
and sub-programs, pages may be marked as "Private". Private pages 
may only be accessed by instructions fetched from private pages. in 
attempt to access private pages from public pages result in a Pnvac; 
Violation" and "Page violation Trap". Execution may be transfer rea b 
private pages from public pages only at Entry Points. The £i -st 
instruction fetched when execution is transferred from instructions 
in public to those in private pages must be the Entry Point Instruct; 
"BR .+2" (0004550) . Other instructions will cause an Instruction V.o. 

tion and a Page Violation Trap. This permits leased sub-programs to 
shared between users with some protection against user errors. 
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Wri t e Vio lati ons - One bit of the protection key in each page map 
entry word governs whether the bus operations DATa In- Pause, DATa 
Out, and DATa Out Byte are permitted for each page. This bit 
^ "Write Enable" must be set to 1 to enable these operations (DATa 

In is not governed by this bit) . Attempts to do a DATIP, DATO, or 
DATOB to a page operation is not performed and a Page Violation 
Trap occurs. 

Leaving this bit clear for a page ensures that no modifications 
may be made to that page. (Note that if a page is not write 
enabled, there is no need to write back on the disk each time it 
is swapped out. It can't have been modified.) 

Instruction Violations - Attempted execution of certain privileged 
instructions have a different effect when fetched in User mode than 
when fetched in Exec. Execution of these instructions in Exec Mode 
is as in a normal KAll (e.g. HALT stops processor operation). 

Attempts to execute these instructions in User Mode cause "Instruct i;. 
Violations". A table of privileged instructions with their suggests., 
effects (a function of Exec coding) is presented below: 


Mnemonic Code Effect 



HALT 

000000 

Mo n i t or r top r> v s e r i ob . 
Types message on job TTY 


WAIT 

0000,01 

Monitor pauses user job, 
restarts when I/O for user done. 


RESET 

000005 

Monitor resets user I/O tasks. 


Add r ess Violations - In the KAll, when an attempt is made to referer ’ 
a word at an odd address, the reference is not made and a bus error 
trap occurs. If the processor stack pointer has been set to an odd 
value or set to point to non-existent memory, then another bus error 
will occur during the error trap. Such bus errors on bus errors car ; 
the KAll to halt. The KTll-B modifies this operation to cause trans- 
fer to be made to Exec mode through the Page Violation Trap when an 
odd address error condition occurs. The odd address error condition 
is disabled when generated by a User program. Thus in User mode, t:...- 
processor will not halt even if the processor stack pointer has be or. 
set to an odd value. The Exec should set the processor stack pointe. 
to some appropriate value before causing any operation making use of 
the processor stack or permitting interrupts. Odd address errors in 
User Mode cause "Address Violations". 
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Time Out Violation - Normally users will not be enable- for 
addresses that "do not exist. But should a memory or device go b d 
that th- user has been enabled for, it is more an Exec than a User 
function to work around its loss. Therefore, if a time out should 
o-cur on what should have been a legitimate bus operation, transfer 
shall be made to EXEC mode through the Paging Violation Trap. this 
condition is a Time-Out violation. 

SHtSusT/^aa^ , -a Oata (0 <l 5s O0> , tines 

are saved in registers of the KTll-B and the processor is forced 
through a fake TIKE CUT ERROR to do a Page Violation uap.^ The 
entry in the associative memory for the page causing the violation 
is cleared. This prevents conflicts between an old page map entry 
in the associative memory and a new page map entry modi nod by the 
Exec (to permit writing, etc) and put in the core page map page. 


4.2.5 User Traps 

User TRAP Instructions (if not trap violations) are serviced by the 
routine selected by the trap vector at location 34 in user page zero. 
The trap proceeds normally through User paging except that tne 
processor priority and state of the T-bit are not efteccca. 


4.2.6 Starting a User 

When a User is to be started or restarted by the Exec, that User's 
context must be loaded into the pertinent maemne registers (genur^ 
registers, program status, program counter. User Map Control isgis^- 
system software flags and pointers). System state words relevant -w 
the old User must be saved or discarded. 


The contents of the associative memory represent state words tha, 
need not be saved (they are only copies of the page map page woro.J 
but must be cleared from the system before starting a new user. 10 
accomplish this, paging of Exec Page 0, (whose entry in the associa 
tive memory would be 8 bits of 0) is treated as a specia C( *^ G 
paged to that physical page specified by the Exec Map Control Regis 
A 0-word in the associative memory thus will not match. A^.1 bits^ 
the 8 x « associative memory are cleared (loaded with nu.x / 
modification (DATO & DAT 03) of the User Map Control Register. Tnus 

the old state is cleared. 


A control sequence is provided in the KTll-B to permit loading o 
program counter and program status and setting of the User ■•-jjc 
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bit in one uninterruptible machine cycle. When a certain bit m the 
Page Control Register is set, the next bus operation originated by 
the CP and not an instruction fetch causes the KTll-B to enter the 
Start User Secuence. The first two bus operations encountered while 
in this sequence cause the KTll-B to ignore the address specified on 
the bus and respond with the contents of the two special registers 
(the Page Program Status and the Page Program Counter) . An RTI is 
the only instruction that will restore the User PC & PS properly. 
User mode is entered when the KTll-B sees a load of the Processor 
Status. The program sequence to return to a User should be: 


MOV #34J3, PS 
MOV KTSP, R6 
INC KTCS 


;make sequence non-interruptible . 
; restore User Stack Pointer. 

; set '‘start user" bit. 


; cause new PC and PS to be loaded 
from KTPC and KTPS and User Mode 
to be entered. 


4.2.7 Exec-User Communication 

The User may request services cf the Exec tnrou.gh Exec Trap Instruc- 
tions (see 4.2.3). The Exec may examine and deposit in User location 
through operation of the "Page Windcv/" . An address on the bus (after 
paging) is identified as the Page Window. Bus operations to the Page 
Window cause the data on the D lines to be written into or reno. frc... 
the User location specified by the contents of a register in tht: K li- 
the Page Address register. A lookup is made for the User Page Map 
Entry associated with the address so specified. A Shared Entry 
Pointer is processed if required and finally the User Paged address 
is referenced and the bus operation specified for the Page Window i-> 
performed on the User Paged address generated in this manner. 
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4.3. INTERNAL OPERATION 


The various KTll-B operations are under the control of two shift 
registers: a two-bit X shift register, and a four-bit Y shift 
register (located on the K826 clock module) . The state of the 
KTll-B at anv time is given as a combination of the contents of 
the two registers; it is written in the form X.Y. When the KTll-3 
is idle (not currently responding to any Unibus operation) , both 
registers are in the zero state, and the steite of the KTll-B is 
given as 0 . 0 . When the KTll-B receives an KSYN signal from the 
processor, the K826 clock is started and a series of states are 
entered, depending on the function to be performed. Figure 4-1 
is a state diagram of the KTll-B. Table 4-1 is a state table, 
giving the conditions of transition from one state to the next 
and noting seme of the signals asserted in a particular state. 
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SECTION 5 

maintenance 


5.1 SPECIAL TEST EQUIPMENT 

The wl 30/Wl 3 1 maintenance board used for troubleshooting the PDP-11 proce 
_ or n , av also be U sed for troubleshooting the ICTll-B. Knen it is to be^ 
used, it should be inserted in slot A14 of tne KTll-i3 logic. Tne fur^t-o 
nf the switches and lichts are thus redefined according to Figure 5-1. . 

lights display the KTll-B state, certain enaoling^signals a^^certain 
status bits. Two switches are used: one enables w.e wa-ntenan.. cloc,v -■ 
Se other orovides the clock pulse used for toggling from state to state. 
No other special maintenance equipment exists. Tne Wl3*/v,131 is not 
included as part of the basic KTll-3. 
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Figure 5-1 
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5.2 MAINTENANCE TECHNIQUES 

The KTll-B requires no periodic maintenance or calibration other than an 
occasional check of the M826 clock frequency. The clock pulses may be 
seen with an oscilloscope on pin A13A1 in the KTll-B logic panel wnen 
the processor is performing bus cycles. They are most easrly seen wmle 
executing a »BR instruction. The period from rising edge of two 
consecutive pulses should be 19 0 to 200 nanoseconds. 

in the event of suspected KTll-3 failure, the following steps should be 
taken to isolate the cause and return the system to service. Refer to 
the KTll-B Block Schematic, drawing set #7605971, and the Kail processor 
modifications for the KTll-B, drawing set #7605963, and also to the scats 
diagrams and table of section 4. 

a. Check all pov/or supplies in the system to insure all devices 
are receiving proper power . 

b. Check all Unibus cables and connections. 


c. 


Make sure that the KTll-B can cycle in unpaged mode by 
depositing and examining into core memory from the 
console. 

If examine or deposit do not seem to work for any core ban/., 
use the V7l 30/17131 maintenance board to toggle through tne 
states 0.0; 1.0; 3.0; 2.0; and then back to 0.0. If the 
KTll-B state dees net begin at 0.0/ check the distribution 
of J.NIT in the logic and it's effect on 'the X and Y shift 
registers; also verify that all bits in the PGC register 
arc cleared (drawing Dl5). Make sure the address, data, 
control, and MSYN signals are getting to the memory, then 
verify that SSYN is returned to the processor. If failure 
occurs on only one memory ban);, verify operation of thuu 

bank. 

If unpaged operation seems to work, run the MAINDEC diagnostic 
programs for the processor and memory to verify their operation 
(see Appendix A for certain KAINDEC modifications). 

Run the KTll-B diagnostic programs KTl, KT2, KT3, and KTG. 

These should be able to catch any basic faults (see Appendix *0 


, sing the console ana 

maintenance board to manually sequence the 
operation, allowing observation of internal signals. 


The folio-wing steps briefly describe methods of usi 

la’ 11-3 in several moces cs 


f. Exec Simple; 

1) Set up a page map in page 1: 
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1400/ 160000 

1402/ 160001 

1404/ 160002 

1776/ 160777 

2) Deposit an exec map pointer of 177001 in the KTEM 
register. 

3) Start paging by depositing a 2 in KTC. 

4) Use Load Address - Examine and the maintenance board 
to toggle through the states for pages 1, 2 , and 3, 
and the last page to examine KTM . 

g. Exec Per Process 

1) Set up Exec map pointer in KTEM: 

2) Set up User map pointer in KTUM: 

3) Set up user page map in page 1: 

1000/ 0 
160000 
160001 

1376/ 160777 

1400/ 160000 same as step f. above. 

4) Start Paging. 

5) Toggle through the states. 


000001 

0/0001 


h. Shared User: 

1) User map pointer: 000005 

2 ) User map at page 5: 

5400/ 160001 

I 1001 

* 2001 

3001 

177001 

3) Use the same exec map and pointer as in step g. above. 

4) Move 3 into KTC to start user; do t’.'O examines ana v/at 
the states carefully - you should be in the start user 
sequence. User light should come on after the tv.-o exa 

5) Examine page zero; you should be in user simple mode. 

• 6) Examine page one; you should be in shared user mode. 

» 
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i . 



Start User: 

1) Use the same map and pointer as above. 

2) Move 3 to KTC. 

3) Do two examines, stepping through the states carefully 
at the end, you should be in user mode. 

4) Examine user page zero. 

5) Press START to initialize to unpaged mode. Change 
user map pointer (KTU. i) to 17 / 1 3” 1 . Repeat steps l—^ 
for pages 1, 2, 3 and last page (ie. examine KTM) . 


In all of the above procedures, deposit meaningful information into the 
locations you v/ 3.11 be examining before SL.nii.ing tne piocoJui o . 
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SECTION 6 
MODULE LIST 

6.1 Modules 

Table 6-1 is a list of modules used in the KTll-3. 


DEC 'TYPE | 

i 

FUNCTION 

QUANTITY 


Inverter 

10 


2-input NOR 

5 


4- input NOR 

10 

Ml 3 3 

2 -input LAND 

24 

Ml 3 5 

3- input HAND 

6 

Ml 3 9 

8- input NAKD 

1 

M167 

Comparator 

1 

M2 03 

Pv/S Flip-Flop 

1 


D Flip-Flop 

1 

MiM 

J-K Flip-Flop 

1 


Scratchpad & Registers 

1 


R/S Flip-Flop 

1 


Multiplexer Latch 

6 

M2 5 9 

Associat i v e Memo r y 

4 

K602 

Pulse Amplifier 

1 

M6.11 

Power Inverter 

3 

M627 

HAND Amplifier 

7 

M721 

Unibus Receiver-Driver 

4 

M783 

Unibus Drivers 

6 

M784 

Unibus Receivers 

2 

M826 

Clock & Shift Register 

1 

M930 

Unibus Terminator 

2 

BC08-7 

Control Cable 

1 

BCllA-8 

Unibus Cable 

2 


Table 6-1 Module List 






